If you received a data breach notice from Healthcare Services Group, Inc. (HCSG), there is an important deadline approaching.
Healthcare Services Group has agreed to a proposed $3 million class-action settlement arising from a September 2024 cybersecurity incident that potentially compromised highly sensitive information belonging to hundreds of thousands of people.
The settlement covers individuals whose private information was potentially affected by the incident, which reportedly impacted approximately 624,496 people.
Eligible class members have until October 1, 2026 to submit a claim.
Depending upon the circumstances, eligible individuals may claim reimbursement of as much as $5,000 for documented monetary losses, a pro rata cash payment and three years of credit monitoring.
For Pennsylvania residents—particularly people connected to the Bensalem-based company—this is a deadline worth paying attention to.
What Is Healthcare Services Group?
Healthcare Services Group is headquartered in Bensalem, Pennsylvania and provides environmental, dining and nutritional support services to healthcare facilities.
The company operates on a large scale, providing services to thousands of healthcare facilities across the United States.
That helps explain why a cybersecurity incident involving the company’s systems could potentially affect such a large number of individuals.
What Happened?
The cybersecurity incident dates to September 2024.
According to the official settlement website, the incident occurred on or around September 27, 2024 and potentially exposed employee personally identifiable information.
Other reports state that Healthcare Services Group detected suspicious activity around October 7, 2024 and determined that an unauthorized third party had accessed its network beginning September 27.
The unauthorized activity reportedly continued into early October.
Files containing sensitive information were potentially accessed or copied.
What Information Was Involved?
The information involved in the Healthcare Services Group breach is particularly concerning.
According to the court-authorized settlement website, potentially affected private information includes:
- Names
- Social Security numbers
- Driver’s license numbers
- State identification numbers
- Financial account information
- Full account access credentials
- Medical information
- Health insurance information
That combination of information can create substantial identity-theft and privacy risks.
A password can be replaced.
A compromised payment card can generally be canceled.
A Social Security number is much more difficult to protect after exposure.
How Many People Were Affected?
The incident reportedly involved information belonging to approximately 624,496 individuals.
The settlement class is defined more specifically.
According to the official settlement website, it includes living people in the United States who were sent a notice from HCSG concerning potential impact from the incident or who were otherwise determined to have potentially had their private information affected.
If you received a Healthcare Services Group data breach notice, read it carefully rather than assuming you are automatically receiving a settlement check.
A claim is required to obtain benefits.
How Much Is the Settlement?
Healthcare Services Group has agreed to pay $3 million into a settlement fund.
The fund will be used for eligible class-member benefits as well as settlement administration and court-approved attorneys’ fees, expenses and service awards.
Healthcare Services Group denies wrongdoing.
Importantly, the settlement has received preliminary approval, but final approval has not yet occurred.
The final fairness hearing is scheduled for September 24, 2026.
You May Be Able to Claim Up to $5,000 for Losses
Settlement class members may submit claims for reimbursement of up to $5,000 in documented, unreimbursed monetary losses reasonably related to the data incident.
Documentation is required.
Depending upon the circumstances, qualifying losses may include costs resulting from identity theft or fraud and certain expenses incurred responding to the breach.
If you suffered losses, gather your documentation now.
Potentially useful records could include:
- Bank statements
- Credit-card statements
- Fraud reports
- Receipts
- Credit-monitoring expenses
- Correspondence concerning identity theft
- Documentation of fees
- Other records demonstrating an unreimbursed loss associated with the incident
Do not wait until the deadline to begin locating documents.
A Pro Rata Cash Payment Is Also Available
Eligible settlement class members can also submit a claim for a pro rata cash payment.
Unlike the documented-loss benefit, this payment does not have a guaranteed fixed value.
The ultimate amount will depend upon factors including the money remaining in the settlement fund and the number of valid claims submitted.
More valid claims generally means the available fund must be divided among more people.
Three Years of Credit Monitoring
Settlement class members may also claim three years of credit-monitoring services.
That can be particularly relevant given the types of information potentially involved in this incident, especially Social Security numbers and financial information.
Credit monitoring does not prevent identity theft, but it can help alert consumers when certain changes appear on their credit files.
Consumers should still independently review their financial accounts and credit reports.
The Critical Date: October 1, 2026
The deadline to submit a claim is:
October 1, 2026.
Online claim forms must be submitted by that date. Mailed claim forms must be postmarked by October 1.
Missing the deadline could mean receiving no settlement benefits at all.
The official notice specifically states that doing nothing means a class member will receive no benefits while giving up the right to sue Healthcare Services Group over claims resolved by the settlement.
There Are Earlier Deadlines Too
Consumers should be aware that October 1 is not the only important date.
The deadline to request exclusion from the settlement is September 4, 2026.
The objection deadline is also September 4, 2026.
The final fairness hearing is currently scheduled for September 24, 2026 at 10:00 a.m. Eastern Time in the U.S. District Court for the Eastern District of Pennsylvania.
Consumers considering opting out should understand that exclusion has different consequences from simply filing a claim.
What Happens if You Do Nothing?
This is one of the most important parts of the settlement.
Doing nothing is not the same as opting out.
According to the official settlement notice, if you do nothing, you receive no settlement benefits and give up your right to sue Healthcare Services Group separately over claims released by the settlement.
Consumers who received a notice should therefore make an informed decision before the applicable deadlines.
Protect Yourself Even If You File a Claim
Settlement compensation does not eliminate the potential long-term consequences of compromised personal information.
If your Social Security number was involved, continue monitoring your credit.
Consider whether a credit freeze is appropriate.
Watch for unfamiliar credit inquiries, loans, collection accounts and addresses.
Because medical and health insurance information was also potentially affected, review your explanations of benefits for unfamiliar medical services.
And be particularly cautious about phishing.
A criminal possessing genuine information about you can create a much more convincing fraudulent email, telephone call or text message.
Keep Your Data Breach Notice
Do not discard your original Healthcare Services Group breach letter.
Keep it along with copies of your settlement claim and supporting documentation.
If identity theft occurs later, records demonstrating that your information was involved in a previous cybersecurity incident may become important.
Healthcare Services Group Victims Have Limited Time to Act
The Healthcare Services Group settlement provides a concrete opportunity for eligible consumers affected by the 2024 incident.
But the settlement does not automatically send money to everyone whose information was involved.
You must submit a valid claim by October 1, 2026 to receive settlement benefits.
Eligible consumers may potentially receive:
Up to $5,000 for documented losses, a pro rata cash payment, and three years of credit monitoring.
The exact benefits available depend upon the settlement terms and the individual’s circumstances.
Questions About Your Data Breach Rights?
If you received a data breach notice, experienced identity theft or suffered financial losses following the exposure of your personal information, you may have questions about your rights.
Ginsburg Law Group, P.C. represents consumers in consumer-protection and privacy matters.
Call 855-978-6564
Visit www.ginsburglawgroup.com
Do not ignore settlement notices or filing deadlines. In the Healthcare Services Group matter, the current claim deadline is October 1, 2026.
Attorney Advertising. This article is provided for informational purposes and is not legal advice. Healthcare Services Group denies wrongdoing. The proposed settlement remains subject to final court approval. Settlement eligibility and benefits are governed by the official settlement agreement and court orders. Past results do not guarantee a similar outcome.
